PT-2026-82922

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and race condition exists in the tlclk driver during the module cleanup process. The issue occurs because the file operations structure lacks the .owner field, potential...

CVE-2026-82236: Incomplete Cleanup

File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...

The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to incomplete cleaning of temporary or auxiliary resources, allows attackers to disclose protected information.

The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise lies in incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2026-80549

A flaw was found in the Linux kernel's s390/vfioccw component. When a device is lost, the fsmnotoper routine performs cleanup while potentially holding other locks, such as the cio subchannel lock. This improper handling of resource cleanup in an asynchronous context could lead to a deadlock,...

EUVD-2026-66464

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

SUSE CVE-2026-72008

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

SUSE CVE-2026-78903

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-78947

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

SUSE CVE-2026-79265

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-80549

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Move cp cleanup out of not operational The fsmnotoper routine is called when the device has been lost, and is by definition no longer operational. Since this can happen asynchronously from the normal behavior of the...

SUSE CVE-2026-80553

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-26456: Concurrent Execution using Shared Resource with Improper Synchronization

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

AZL-97848 CVE-2026-80553 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-80553

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

UBUNTU-CVE-2026-74734

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...

CVE-2026-80553 s390/vfio_ccw: Cancel existing workqueues

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...